NERC CIP Compliance Analyst

Job Summary

The NERC CIP Compliance Analyst is responsible for providing compliance oversite, guidance, and direction necessary to maintain compliance with North American Electric Reliability Corporation Critical Infrastructure Protection program.

Primary Job Duties and Responsibilities

• Lead NERC CIP Compliance Program including reliability standards compliance strategy development and implementation.
• Monitor NERC and other industry entities for changes to standards and guidance to provide consistent interpretation of NERC CIP and NPCC requirement standards.
• Participation in regulatory and internal self-assessments, audits and spot checks
• Maintain a high degree of awareness of emerging utility industry compliance issues and critical infrastructure security threats.
• Routinely assess the effectiveness and risks of the NERC CIP compliance program.
• Implementing software patching of critical plant networks and workstations when available.
• Monitor Physical Security Perimeters and coordinate repairs as needed.
• Vet incoming contractors and personnel for access to CIP controlled equipment.
• Coordinate employee training for CIP Programs.
• Evaluate security incidents and determine what response if any is needed and coordinate the proper response.

Required Education/Experience

• Strong communication skills
• Bachelors degree in Engineering, Computer Science or a Cyber Security related field
• Experience in formal/structured IT security risk assessment methodology, including understanding the implementation challenges across all levels of hardware platforms and software applications.
• Knowledge of anti-virus/anti-malware, and firewall technologies
• Experienced with a variety of operating systems; Windows Server, Windows 10, Linux, etc.
• Pro-active, self-reliant, and able to handle time-pressure based priorities.
• In Depth Knowledge of computer program and system networking
• Ability to prioritize and execute tasks with efficiency and lead program initiatives and exercise mature decision making appropriate for a critical operations environment.

Preferred Work Experience:

• Knowledge of Utility Industry NERC CIP Regulatory Requirements
• Experience working in regulated cybersecurity environment.
• Experience working with Industrial Defender Cybersecurity Platform
• Experience working with ABB and GE distributed control systems (DCS)
• Experience working with data historian applications such as Plant Information (PI)

Working Conditions

• Normal office environment
• Occasional exposure to Power Plant Environment In and around large rotating equipment, energized electrical equipment, high noise areas.
• May occasionally have to work off shift hours or weekends to troubleshoot or respond to network security event.

Licenses & Certifications

• Valid Drivers License
• Ability to obtain Transportation Workers Identification Credential (TWIC)
• Ability to pass criminal background checks

Behavioral Attributes

The successful candidate must:

• Be able to perform effectively in a team environment without close supervision,
• The ability to work well with people inside and outside of Canal Generating,
• Use discretion concerning confidential and sensitive company information,
• Possess strong verbal and written communication skills
• Demonstrate a professional attitude at all times

Reporting Responsibilities

Reports to the Maintenance Manager.

Location and Salary

Position is located in Sandwich, MA. Salary will be commensurate with the experience the successful candidate brings to the job.

by Jobble